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DETAILED ACTION 

1 . This action is in response to the amendment dated on December 12, 2005. 

2. Claims 1-16 are under pending. 



Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

3. Claims 1-16 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Iwamura et al. (US Patent No. 5,321,752) and further in view of Sathi Perumal 
("Pipelined 50 MHz CMOS ASIC for 32 bit Binary to residue conversion and residue to 
binary conversion" 1994). 

As per claim 1 , Iwamura teaches: 
A modular exponentiation calculation apparatus [col. 6 lines 5-9 "a communication 
apparatus which performs encryption or decryption of a communication content 
by using a modular exponentiation C=M e mod N concerning integers M and e 
using N as the modulus, the communication apparatus comprising"] which utilizes 
a residue number system [col. 3 lines 50-53 "modular exponentiation and modular 
multiplication employed in cryptic communication is executed simply by 
repeating modular multiplication using R which is prime to N which is the 
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residue"] representation by a first base and a second base including sets of a plurality 
of integers with respect to object data C and parameters p, q, d (all integers included in 
both the bases are mutually primary, a product "A" of all the integers of the first base is 
A>p, A>q, a product "B" of all the integers of the second base is B>p, B>q, and A X 
B>C) to obtain a calculation result m=C d mod (p X q) [col. 4 lines 40-41 "the modular 
exponentiation C=M e mod N is executed", col. 1 lines 13-24 "computation known 
as modular exponentiation which is expressed by C=M e mod N(C,M,N,e), where E, 
M, N and e are integers"], said apparatus comprising: 

a first processing unit configured to obtain a residue number system representation of a 
value Cp dp X B mod p or a value with p added thereto based on a residue number 
system representation of a remainder value Cp=C mod p by p of said data C and a 
remainder value dp=d mod (p-1) by (p-1) of said parameter d [col. 1 lines 14-24 
"encryption of data to transmit and decryption of received cryptogram by using a 
computation in which two integers A and B are multiplied with each other and the 
product is divided by a third integer N to determine the residue, i.e., modular 
multiplication expressed by A»B mod N", col. 3 lines 63-68, col. 4 lines 1-3 
"executing a modular multiplication A»B mod N of integers A and B by using N as 
the modulus, the communication apparatus having at least one computing unit 
which computes and outputs Z=U»V«R' 1 mod N by using an integer R which is 
primer to N, the method comprising the steps of: inputting to one of the 
computing units A and a constant R R which is expressed by R R =R 2 mod N, 
thereby causing the computing unit to output A R =A»R R » R" 1 mod N" col. 9 lines 



( 
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65-68, col. 10 lines 1-2 "addition of Ej.i as the residue are conducted. That is, Lj.i 
is converted into Ej.i and the thus obtained E j.i is added. By this method, all the 
subtractions made by mod N can be carried out by adding computations"]; 

a second processing unit configured to obtain a residue number system representation 
of a value Cp dp X B mod q or a value with q added thereto based on a residue number 
system representation of a remainder value Cq=C mod q by q of said data C and a 
remainder value dq=d mod (p-1) by (q-1) of said parameter d [col. 4 lines 3-5 
inputting to one of the computing units B and the constant R R thereby causing 
the computing unit to output B R =B«R R »R" 1 mod N]; 

a third processing unit configured to obtain a residue number system representation of 
an integer m' congruent with m=C? mod (p X q) [col. 4 line 23 "constant R R which is 
expressed by Rr=R 2 mod N"], based on both the residue number system 
representations obtained by said first and second processing units [col. 4 lines 6-8 
"inputting to the computing unit the A R and B R thereby causing the computing 
unit to output T R =A r »Br»R" 1 mod N"]; and 

Iwamura teaches the apparatus comprising four various processing unit 
(i.e. four various computing means col. 6 lines 19-32). Iwamura doesn't expressively 
mention that calculate result by converting RNS (residue number system) to binary 
representation. 

However, Sathi Perumal teaches the Residue to Binary conversion [page 
456 lines 23-25 "if two residue number Z1 and Z2 are known, then the binary 
number equivalent B can be calculated from (13)"]. 
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Therefore, it would have been obvious to a person of ordinary skill in the 
art at the time the invention was made to incorporate the teaching Sathi Perumal into 
the teaching of Iwamura to use RNS to Binary converter. The modification would be 
obvious because one of ordinary skill in the art would be motivated to use residue to 
binary converter (RBC) to convert the 8 RNS moduli words to a unique 32 bit binary 
number. The result is a complete simulated pipelined design which supports a clock 
frequency of 50 MHz [Sathi Perumal, page 454 lines 5-10]. 

As per claim 2 , the rejection of claim 1 is incorporated and further 
Iwamura teaches: 

first processing unit performs a residue number system Montgomery multiplication of 
the residue number system representation of said remainder value Cp and the residue 
number system representation of B 2 mod p [col. 27 lines 23-50 "in executing 
Montgomery modular multiplication, R is an integer prime to N on condition that 
R is determined to be 2 n (n being an optional integer). In this case, the division by 
R can simply be performed by a bit-shift operation, so that the Montgomery 
modular multiplication of the formula (25) or (27) is executed simply by 
multiplication alone"], performs a residue number system Montgomery exponentiation 
using said remainder value 1 dp as an exponent portion with respect to the obtained 
residue number system representation, and thereby obtains the residue number system 
representation of the value Cp dp X B mod p or the value with p added thereto [col. 27 
lines 52-66, col. 28 lines 1-9 "it is thus possible to carry out modular 
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exponentiation only by Montgomery modular multiplication. The initial value of 
C R in formula (30) can be treated as a constant which is determined by Rr and N. 
The described modular exponentiation conducted through Montgomery modular 
multiplication alone will be referred to a Montgomery modular exponentiation", 
col. 29 lines 47-50, col. 30 lines 1-2], and 

second processing unit performs a residue number system Montgomery multiplication of 
the residue number system representation of said remainder value Cq and the residue 
number system representation of B 2 mod q [col. 27 lines 23-50 "in executing 
Montgomery modular multiplication, R is an integer prime to N on condition that 
R is determined to be 2 n (n being an optional integer). In this case, the division by 
R can simply be performed by a bit-shift operation, so that the Montgomery 
modular multiplication of the formula (25) or (27) is executed simply by 
multiplication alone"], performs a residue number system Montgomery exponentiation 
using said remainder value dq as the exponent portion with respect to the obtained 
residue number system representation, and thereby obtains the residue number system 
representation of the value Cp dq X B mod q or the value with q added thereto [col. 27 
lines 52-66, col. 28 lines 1-9 "it is thus possible to carry out modular 
exponentiation only by Montgomery modular multiplication. The initial value of 
C R in formula (30) can be treated as a constant which is determined by R R and N. 
The described modular exponentiation conducted through Montgomery modular 
multiplication alone will be referred to a Montgomery modular exponentiation" 
col. 29 lines 47-50, col. 30 lines 1-2]. 
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As per claim 3 , the rejection of claim 2 is incorporated and further 
Iwamura teaches: 

a unit configured to obtain said remainder value (i.e. residue calculation) dp and said 
remainder value dq based on said parameters p, q, and d [col. 20 lines 20-30 "Sj.i,„.i» 
X" + Ej.i is executed in place of executing Qj.i *N, so that the residue calculation 
is performed. Sj.i, n -i * X" is automatically performed due to the overflow of S H , n -i, 
the residue calculation can be completed only by adding Ej.i"]. 

As per claim 4 . the rejection of claim 1 is incorporated and further 
Iwamura teaches: 

third processing unit performs a residue number system Montgomery multiplication of 
said residue number system representation obtained by said first processing unit and 
the residue number system representation of an inverse element qinv=q" 1 mod p in a 
modulus p of said parameter q [col. 27 lines 16-18 "The Montgomery modular 
multiplication can be expressed as follows: 

T R =Ar»B r »R" 1 mod N=(A r »Br + M»N)/R"], performs a residue number system 
multiplication (i.e. residue 'multiplication) of the obtained residue number system 
representation [col. 18 lines 48-54 "the calculation of the RSA cryptography to be 
performed on the basis of the Chinese Reminder Theorem can basically be 
executed in parallel. Therefore, it is most suitable for use in the method 
according to the present invention in which the residue multiplication is executed 
by a plurality of calculating apparatus"] and the residue number system 
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representation of said parameter q, performs a residue number system Montgomery 
multiplication of said residue number system representation obtained by said second 
processing unit and the residue number system representation of an inverse element 
pinv=p' 1 mod q in a modulus q of said parameter p [col. 27 lines 16-18 "The 
Montgomery modular multiplication can be expressed as follows: 

Tr =Ar*B r # R" 1 mod N=(Ar«Br + M*N)/R"], performs a residue number system 
multiplication of the obtained residue number system representation and the residue 
number system representation of said parameter p [col. 18 lines 48-54 "the 
calculation of the RSA cryptography to be performed on the basis of the Chinese 
Reminder Theorem can basically be executed in parallel. Therefore, it is most 
suitable for use in the method according to the present invention in which the 
residue multiplication is executed by a plurality of calculating apparatus"], 
performs a residue number system addition of both obtained results of a residue 
number system multiplication [col. 12 lines 14-16 "FIG. 3 illustrates a circuit for 
executing basic calculation R=R*X + A n .j *B mod N of the residue multiplication 
and called a basic operator" (i.e. addition of residue multiplication)], and obtains the 
residue number system representation of the integer m' as the combination with C d in 
said modulus p X q (i.e. modular exponentiation) [col. 27 lines 52-68 "Modular 
exponentiation C=M e mode N also can be conducted as follows by using 
Montgomery method" coL 28 lines 1-4 "it is thus possible to carry our modular 

i 

exponentiation only by Montgomery modular multiplication"]. 



! 
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As per claim 5 , the rejection of claim 4 is incorporated. Iwamura doesn't 
teach that convert the binary representations to the RNS (Residue number system). 

However, Sathi Perumal teaches the Binary to residue conversion [page 
454, 455 equation (5) Fig. 2]. 

Therefore, it would have been obvious to a person of ordinary skill in the 
art at the time the invention was made to incorporate the teaching of Sathi Perumal into 
the teaching of Iwamura to use Binary to residue converter. The modification would be 
obvious because one of ordinary skill in the art would be motivated to use BRC (Binary 
to residue Conversion) which employs a unique inverted tree structure that permits very 
fast clock frequencies while at the same time maintaining an area-efficient design [Sathi 
Perumal page 454 lines 35-37], 

As per claim 6 , the rejection of claim 5 is incorporated and further 
Iwamura teaches: 

unit configured to obtain the inverse element pinv and the inverse element qinv in the 
modulus p of said parameter q based on said parameters p and q [col. 5 lines 14-16 
"computing A R # B R # R" 1 mod N on the basis of the computing results A R and B R and 
the R, thus determining T R as the computation result; and computing T R *R" mod 
N on the basis of the T R and the R"]. 

As per claim 7 , the rejection of claim 1 is incorporated and is rejected for 
the same reason set forth in the rejection of claim 3 above. 
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As per claim 8 , the rejection of claim 1 is incorporated and further 
Iwamura teaches: 

a storage unit configured to store data of a residue number system representation 
depending only on said parameters p, q, d [col. 6 lines 59-60 "fourth computing 
means which computing , upon receipt of C r stored in the first storage means"]. 

As per claim 9 , the rejection of claim 1 is incorporated and is rejected for 
the same reason set forth in the rejection of claim 8 above. 

As per claim 10 , the rejection of claim 1 is incorporated and further 
Iwamura teaches: 

first processing unit and said second processing unit execute at least a part of a 
processing at the same time (i.e. parallel processing or pipeline processing) [Fig. 4 col. 
12 lines 22-25 "The systolic array performs the calculation by a pipeline 
processing by PEs which are small and same functional blocks"]. 

As per claim 11 , the rejection of claim 1 is incorporated and is rejected for 
the same reason set forth in the rejection of claim 10 above. 
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As per claim 12 . the rejection of claim 1 is incorporated and further 
Iwamura teaches: 

a unit configured to set a value of said integer m' less than p X q obtained by the subunit 
or a value less than p X q obtained by subtracting a predetermined number pXq from 
said integer m* not less than p X q to m=C d mod p X q [col. 9 lines 65-68, col. 10 lines 
1-2 "instead of execution of -Qj.^N which is Lj.i • X n mod N, subtraction of Lj.i • X n 
and addition of Ej.i as the residue are conducted. That is, Lj^ is converted into 
Ej.i and the thus obtained Ej.i is added. By this method, all the subtractions made 
by mod N can be carried out by adding computations"]. 

As per claim 13 , the rejection of claim 1 is incorporated and further 
Iwamura teaches: 

the number of elements of said first base is the same as the number of elements of said 
second base [col. 10 lines 57-59 "the modular exponentiation can be realized by 
repeating the modular multiplication C = OB mod N (B is M or C)"]. 

As per claim 14 , it is a method claim corresponds to apparatus claim 1 
and is rejected for the same reason set forth in the rejection of claim 1 above. 

As per claim 15 , it is a computer usable medium claim corresponds to 
apparatus claim 1 and is rejected for the same reason set forth in the rejection of claim 
1 above. Further Iwamura teaches that computer usable medium [coA 8 line 31]. 
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As per claim 16 , it is an apparatus claim corresponds to apparatus claim 1 
and is rejected for the same reason set forth in the rejection of claim 1 above. 

Response to Argument 

4. Applicant's arguments filed December 12, 2005 have been. fully considered but 
they are not persuasive. 

Applicant argues that: 

"Iwamura does not utilize residue number system representations". Iwamura 
does not teach a modular exponentiation calculation apparatus utilizing residue number 
system representations". 

Examiner maintains that: 

Iwamura teaches the circuit to perform high-speed modular multiplication or 
modular exponentiation. The repetition of computation is executed by repeatedly 
operating a single circuit or by simultaneously operating a plurality of circuits of the 
same construction in a parallel manner [abstract]. Iwamura teaches the modular 
exponentiation C = M e mod N concerning integers M and e using N as the modulus [col. 
4 lines 15-17] and communication unit which computes and outputs Z = U.V.R ~ 1 mod 
N by using, which respect to input data U and V, an integer R which is primer to N [col. 
4 lines 18-21]. Iwamura teaches the residue number system representations (i.e. binary 
expression of e) [col. 4 lines 25-27, "the computing unit to output M R = M.Rr.R' 1 
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mod N; representing the binary expression of e by e = [e\ e M , e 1 ]" (i.e. which is 

expressed as a set)] and modular exponentiation calculation using the residue number 
system representations [col. 4 lines 28-41 "after completion of processing on all e', 
inputting the C R and 1 as a constant to one of the computing units, thereby 
causing the computing unit to output, as the aimed C, C = C R .1.R" 1 mod N, 
whereby the modular exponentiation C = M e mod N is executed"]. Iwamura teaches 
the modular multiplication C = M e mod N by repeating modular multiplication of two 
number [algorithm, col. 8 lines 57-68, col. 9 lines 1-6]. Iwamura teaches that 
computation of A.B mod N = R, where A, B and N are integers and each of A, B and N 
are divided by n into n sections each being of m bits (i.e. result of division into n 
sections, where each section contains a contributing factor as an element within number 
system representations set) [col. 9 lines 17-31]. Iwamura teaches the residue 
multiplication [Fig. 3 col. 12 lines 14-17, col. 11 lines 32-38, col. 22 lines 51-64] and 
the systolic array (which performs the calculation by a pipeline processing) [Fig. 4]. 
Iwamura teaches the residue calculation that can be completed by adding E H [col. 20 
lines 20-40 "Ej.i in .i (i=1, .... n) are sequentially transmitted at timing signal T m _i 
synchronized with B n ." (i.e. more than one element such as a set is required for 
calculation)]. Iwamura teaches the Moldular Multiplication using the Montgomery 
method [col. 26 lines 37-55, col. 27 1-24, lines 52-60] as claimed. 
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Applicant argues that: 

"Perumal does not cure deficiencies of Iwamura and therefor there is no 
motivation to combine the teachings in Iwamura with the teaching in Perumal". 

Examiner maintains that: 

Iwamura teaches the circuit to perform high-speed modular multiplication or 
modular exponentiation. Iwamura teaches the residue number system representations 
(i.e. binary expression of e) [col. 4 lines 25-27, "the computing unit to output M R = 
M.Rr.R" 1 mod N; representing the binary expression of e by e = [e\ e M , e 1 ] (i.e. 
which is expressed as a set)"] and modular exponentiation calculation using the 
residue number system representations [col. 4 lines 28-41 "after completion of 
processing on all e', inputting the C R and 1 as a constant to one of the computing 
units, thereby causing the computing unit to output, as the aimed C, C = C R .1.R' 1 
mod N, whereby the modular exponentiation C = M e mod N is executed"]. Perumal 
discloses the Residue number system (RNS) processor architecture Binary to Residue 
conversion (BRC) and Residue to Binary conversion (RBC) [page 454, 455 (i.e. two- 
way conversation)]. The modification would be obvious because one of ordinary skill in 
the art would be motivated to use residue to binary converter (RBC) to convert the 8 
RNS moduli words to a unique 32 bit binary number. The result is a complete simulated 
pipelined design, which supports a clock frequency of 50 MHz [Sathi Perumal, page 
454 lines 5-fO]. Furthermore, the examiner recognizes that obviousness can only be 
established by combining or modifying the teaching of the prior art to produce the 

i 



Application/Control Number: 10/051,276 Page 15 

Art Unit: 2135 

claimed invention where there is some teaching, suggestion, or motivation to do so 
found either in the references themselves or in the knowledge generally available to on 
of ordinary skill in the art. See In re Fine, 837 F. 2d 1071, 5 USPQ2d 1596 (Fed. Cir. 
1988) and In re Jones, 958 F.2d 347, 21 USPQ 2 nd 1941 (Fed. Cir 1992). In this case, 
the combination of Iwamura and Perumal teach the claimed subject matter and the 
combination is sufficient. 
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Conclusion 

5. Accordingly, THIS ACTION IS MADE FINAL. See MPEP § 706.07(a). Applicant 
is reminded of the extension of time policy as set forth in 37 CFR 1.136(a). 

Robert Hohne ("A Programmable High Performance processor using the Residue 
Number System and CMOS VLSI technology", 1989 IEEE, page 41-43). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1.136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the date of this final action. 

Any inquiry concerning this communication or earlier communications 
from the examiner should be directed to Nirav Patel whose telephone number is 571- 

272- 5936. If attempts to reach the examiner by telephone are unsuccessful, the 
examiner's supervisor, Kim Vu can be reached on 571-272-3859. The fax and phone 
numbers for the organization where this application or proceeding is assigned is 571- 

273- 8300. 
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Any inquiry of a general nature or relating to the status of this application or 
proceeding should be directed to the receptionist whose telephone number is 571-272- 
2100. 



NBP 

1/26/06 



